Detections
Analytics
OFFIS DCMTK DICOM Toolkit < 3.6.7 Multiple Vulnerabilities
critical Nessus Plugin ID 162601
Language:
Synopsis
The version of OFFIS DCMTK DICOM Toolkit running on the remote server is affected by multiple vulnerabilities.Description
According to its self-reported version number, the instance of OFFIS DCMTK DICOM Toolkit hosted on the remote server is affected by multiple vulnerabilities:- The affected product’s service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.
(CVE-2022-2119)
- The affected product’s service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.
(CVE-2022-2120)
- The affected product has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.
(CVE-2022-2121)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
Solution
Upgrade to OFFIS DCMTK DICOM Toolkit version referenced in the vendor security advisory.See Also
Plugin Details
Severity: Critical
ID: 162601
File Name: offis_dcmtk_3_6_7_multiple_vulnerabilities.nasl
Version: 1.5
Type: local
Agent: windows, macosx, unix
Family: Misc.
Published: 6/29/2022
Updated: 3/23/2023
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2022-2120
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:offis:dcmtk
Required KB Items: installed_sw/OFFIS DCMTK DICOM Toolkit
Exploit Ease: No known exploits are available
Patch Publication Date: 6/28/2022
Vulnerability Publication Date: 6/23/2022